LDAP Accouting best practice (was 'LDAP Accounting')

...

invalidate entry and database cache entries.

Really? Why?

LDAP doesn't provide MVCC semantics. As far as I can see, an LDAP update contains all the information required to update (not invalidate) in-RAM cache.

To be clear: I don't use LDAP for data storage. I dislike it's data model, and the data typing in particular. But I don't see any reason it should be consigned to the "read-mostly" bin on a *theoretical* basis.

Moved to a new thread. -Arran